
Privacy Policy
Thank you for visiting our website! Data protection is a matter of trust, and your trust is important to us.
Thus, the protection of personal data is of paramount importance to us. That’s why we want to take this opportunity to inform you of the personal data that we collect when you visit our website, the purposes for which the data are used and to whom we might make the data available.
We declare our compliance with the statutory provisions on data protection and data security. Furthermore, any data will be used solely for the purposes specified below and measures will be taken to uphold data security by ensuring that data are used properly and not made accessible to unauthorised parties. Contractors, service providers and their employees are obliged to maintain confidentiality and secrecy regarding the data disclosed by us, unless there is a legally justifiable reason for transferring or disclosing the data entrusted or made accessible.
The present Privacy Policy applies to the controller’s website, which can be accessed at the domain https://www.casali.world/en-us and the various subdomains (hereinafter referred to as “our websites”). We reserve the right to make amendments to this Privacy Policy with effect for the future, in particular in the event of further improvements to the website, the use of new technologies or changes to the legal grounds or the relevant case law.
You can print or save this Privacy Policy simply by making use of your browser’s standard functions. We recommend that you attach a printout of this Privacy Policy to your documents.
Gender disclaimer
For reasons of better readability, the masculine form is used for personal names and nouns on this website. Corresponding terms apply to all genders for the purposes of equal treatment. The abbreviated wording is intended solely to improve readability and does not imply any judgement at all.
1. Name and address of the controller
Pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR), the controller is:
Josef Manner & Comp AG
Wilhelminenstrasse 6
A – 1170 Vienna
Phone: +43 1 488 22-0
Fax: +43 1 486 21 55
Website: josef.manner.com
Email: team@manner.com
2. Point of contact for data protection enquiries
Josef Manner & Comp AG
Wilhelminenstrasse 6
A – 1170 Vienna
Phone: +43 1 488 22-0
Fax: +43 1 486 21 55
Website: josef.manner.com
Email: datenschutz@manner.com
3. General information on data processing
3.1 Scope of personal data processing
Personal data means any information relating to an identified or identifiable natural person. We generally only collect and use our users’ personal data to the extent necessary to provide a functional website and to display and present our content and services. Only after the user has given their consent will their personal data be collected and used. However, this does not apply in cases where prior consent cannot be obtained and the processing of the data is permitted by law.
3.2 Legal grounds for the collection and processing of your personal data
• Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis for personal data processing.
• If the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to any processing operations required to carry out pre-contractual measures.
• Insofar as the processing of personal data is necessary to fulfil a legal obligation to which the controller is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
• In the event that fundamental interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
• If the processing is necessary to safeguard a legitimate interest of the controller or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
3.3 Data deletion and duration of storage
As soon as the purpose of storage no longer applies, the personal data of the data subject will be deleted or rendered unavailable. Furthermore, data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Data will also be deleted or rendered unavailable if a duration of storage prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
4. Hosting of the website and generation of log files
When accessing and using our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When using our website, we collect the following data, which we need for technical reasons in order to display our website to you and to ensure stability and security:
• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites from which the user’s operating system accesses our website
• Websites that are accessed by the user’s operating system via our website
This data is also stored in the log files of our system. This does not apply to the user’s IP address or other data that would allow the data to be assigned to a specific user. We do not store this data together with other personal data of the user.
4.1 Legal grounds for personal data processing
Art. 6 (1) (f) GDPR serves as the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary within the scope of providing a website and thus serves to preserve a legitimate interest of our company.
4.2 Duration of storage
The temporary storage of the IP address by the system is necessary to enable the website to be provided to the user’s computer. To this end, the user’s IP address must remain stored for the duration of the session.
5. Use of cookies
Our website uses cookies. Cookies are small text files that are stored locally in the cache of the browser used. As soon as a user accesses our website, a cookie is stored on the user’s operating system. This cookie includes a distinctive string of characters that enables the browser to be uniquely identified when the website is accessed again. Cookies do not become part of the PC system, cannot execute programmes and do not contain viruses.
We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identified even after a page change. The use of cookies can be technically necessary or implemented for other purposes.
We use various cookies on our websites, the type and function of which differ.
5.1 Session cookies and persistent cookies
Session cookies are a type of cookie that is deleted as soon as the user closes the browser after their current session.
Persistent cookies are stored on the user’s device in order to provide login information, settings or preferences the next time the user visits the website. They are designed to enable a more convenient and faster use of the website. The duration for which these cookies are stored is limited, after which they are automatically deleted. Please note that the duration of storage may vary from cookie to cookie. You have the option of prematurely deleting these cookies from your system by using your browser’s standard functions.
5.2 Essential cookies
We use essential cookies on our website. These are intended to ensure the proper functioning of the website by enabling basic functions such as page navigation and access to the website. The user data collected by essential cookies will not be processed to create user profiles. We use so-called session cookies that store a session ID that allows various requests from your browser to be assigned to the shared session. Some elements of our website require the accessing browser to be identified even after a page change.
Our website cannot function correctly without these cookies. Art. 6 (1) (f) GDPR is the legal basis for this processing.
5.3 Non-essential cookies
These cookies serve to make the use of the website more efficient and attractive. They are not required in order to use the basic functions of our website. Pursuant to Art. 6 (1) (a) GDPR, your consent is the legal basis for this processing. Non-essential cookies are automatically deleted after a specific period of time, which may vary depending on the cookie.
5.3.1 Performance cookies
Performance cookies help website operators understand how visitors interact with websites by collecting and reporting information anonymously.
5.3.2 Marketing cookies
Marketing cookies from third-party providers enable various offers to be displayed that match your interests. These cookies are designed to record the web activities of users over a longer period of time. You may recognise these cookies on different devices you use.
5.4 Duration of storage
Once the data transmitted to us by the cookies is no longer required to fulfil the purposes described above, this information will be deleted, especially if the cookies are deactivated. Further storage may take place in individual cases if this is required by law.
5.5 Legal grounds for personal data processing
Our legitimate interest in the processing of personal data pursuant to Art. 6 (1) (f) GDPR forms the legal basis for the processing of so-called essential cookies. We need your consent for non-essential cookies or so-called third-party cookies. If you have given us your consent to the use of cookies in response to a notice (“cookie banner”) provided by us on the website, the lawfulness of the use is additionally governed by Art. 6 (1) (a) GDPR. You can withdraw this consent for future effect at any time by deactivating cookies in your browser settings.
5.6 Information on browser settings configuration
You can manage your cookie settings by using the configuration options concerning your browser settings listed below.
Most browsers are preconfigured to accept cookies automatically. You can completely deactivate or restrict the transmission of cookies by changing the settings in your browser. Previously saved cookies can be deleted at any time. This can also be carried out automatically. However, we would like to point out that you may no longer be able to use all the functions of our website to their full extent if you have deactivated cookies in your browser settings for our website. You can also delete cookies previously stored in your browser or view the duration of storage in the settings of your browser. In addition, it is possible to programme your browser to notify you before cookies are stored. Since the various browsers differ in their respective functionalities, we kindly ask you to use the respective help menu of your browser for the configuration options.
6. Email contact
6.1 Scope of personal data processing
It is also possible to contact us via the email address provided. In this case, the user’s personal data transmitted along with the email will be stored. The data will be used solely for processing your request or for the purpose of contacting you.
6.2 Purpose of data processing
The purpose of data processing is to provide the option of contacting us via the contact form or email.
6.3 Duration of storage
The data will be deleted as soon as the purpose of processing has been achieved and no other legal retention period applies. The conversation is considered to be over when it becomes clear from the circumstances that the matter in question has been conclusively clarified. In this regard, no data will be passed on to third parties without your consent.
6.4 Legal grounds for personal data processing
The legal grounds for the processing of data transmitted during the sending of an email is Art. 6 (1) (f) GDPR.
If the email contact is intended to conclude a contract, the legal grounds for data processing are set out in Art. 6 (1) (b) GDPR.
7. Use of web analytics tools
In an effort to make our website as enjoyable and convenient as possible for you as a user, we employ the services of external service providers in some cases. Subsequently, we will provide you with information about the implementation and utilisation of services and functions in order to enable you to exercise your rights with the service providers, if necessary.
Our website uses features of web analytics services provided you have given your consent in the cookie banner. For this purpose, cookies are used to analyse the use of the website by its users. The information collected in this way is transferred to the provider’s server and stored there.
The use of performance and marketing cookies requires your consent in accordance with Art. 6 (1) (a) GDPR. Upon first accessing our website, a cookie banner is displayed where you can give your express consent to the use of performance and marketing cookies.
7.1 Web analytics tool “Google Analytics”
7.1.1 Scope of personal data processing
This website uses Google Analytics, an open source software for the statistical analysis of visitor numbers. Google Analytics uses cookies which are intended to analyse your use of the website. The use of these cookies generates information about the use of the website, which is then transmitted to a server and stored there. Any IP addresses collected are masked before being used to analyse user behaviour. The last octet (8 bits) of IPv4 addresses and the last 80 bits of IPv6 addresses are truncated, thereby anonymising the IP address. This is done shortly after they have been sent to Google Analytics. This means that the full IP address is never stored locally. Geographical parameters are later derived from truncated IP addresses.
7.1.2 Purpose of data processing
Processing personal data of our users enables us to create an analysis of our users’ surfing behaviour. We use the assessments created by Google Analytics to compile reports on website activity that in turn enable us to constantly improve our website and adapt it to the needs of our users.
7.1.3 Duration of storage
The duration of storage for data in Google Analytics is set at 2 years. The cookies stored are valid for up to 2 years.
7.1.4 Legal grounds for personal data processing
Your express consent pursuant to Art. 6 (1) (a) GDPR forms the legal grounds for this use. You can withdraw this consent for future effect at any time by deactivating cookies in your browser settings.
7.2 Google Tag Manager
7.2.1 Scope of personal data processing
Meta data on embedded scripts, IP address, usage statistics.
7.2.2 Purpose of data processing
Management and implementation of tracking and analytics tools.
7.2.3 Duration of storage
No personal data are stored by the Tag Manager itself.
7.2.4 Legal grounds for personal data processing
Your express consent pursuant to Art. 6 (1) (a) GDPR forms the legal grounds for this use. You can withdraw this consent for future effect at any time by deactivating cookies in your browser settings.
7.3 Meta Pixel
7.3.1 Scope of personal data processing
IP address, cookie IDs, usage data, interactions with adverts.
• Recipient of transmission: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
7.3.2 Purpose of data processing
Evaluating the efficacy of Facebook adverts and analysing target groups.
7.3.3 Duration of storage
90 days at the most.
7.3.4 Legal grounds for personal data processing
Your express consent pursuant to Art. 6 (1) (a) GDPR forms the legal grounds for this use. You can withdraw this consent with effect for the future at any time by deactivating cookies in your browser settings.
7.4 Pinterest tag
7.4.1 Scope of personal data processing
Cookie IDs, IP address, interactions with adverts and website visits.
Recipient of transmission: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
7.4.2 Purpose of data processing
Analysis of Pinterest campaigns and collection of conversion data.
7.4.3 Duration of storage
180 days at the most.
7.4.4 Legal grounds for personal data processing
Your express consent pursuant to Art. 6 (1) (a) GDPR forms the legal grounds for this use. You can withdraw this consent with effect for the future at any time by deactivating cookies in your browser settings.
8. Rights of the data subject
Whenever your personal data is processed, you are a data subject within the meaning of the GDPR and are entitled to the rights listed below in relation to the controller.
• Right of access (Art. 15 GDPR);
• Right to rectification (Art. 16 GDPR);
• Right to erasure (Art. 17 GDPR);
• Right to restriction of processing (Art. 18 GDPR);
• Right to data portability (Art. 20 GDPR);
• Right to object (Art. 21 GDPR);
8.1 Right to file a complaint with a supervisory authority
Irrespective of any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the location of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority with which the complaint has been filed will inform the data subject of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
You may file a complaint with the competent supervisory authority if you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way.
In Austria, this is the Data Protection Authority located in the Barichgasse 40-42 in 1030 Vienna (Phone: +43 1 52 152-0, Email: dsb@dsb.gv.at, Website: https://www.dsb.gv.at/).
9. Hyperlinks to third-party websites
On our websites we use so-called hyperlinks to the websites of other providers. When these hyperlinks are activated, you are forwarded from one of our websites directly to the website(s) of other providers. You will recognise this by the change of URL, among other things. We will not assume any responsibility for the confidential handling of your data on the websites of third parties, as we have no influence on whether these companies comply with data protection regulations. Please consult these websites directly for information on how these companies handle your personal data.
10. Data security
We are committed to protecting your privacy and treating your personal data with confidentiality. In order to prevent manipulation, loss or misuse of your data stored by us, we have implemented extensive technical and organisational security measures, which are regularly reviewed and adapted to technological progress.
However, we must point out that due to the structure of the internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our scope of responsibility. In particular, data which are disclosed without encryption – e.g. by email – can be read by third parties. We have no technical control over this. It lies within the responsibility of the user to protect the data they provide against misuse by means of encryption or in any other way.
11. Amendments to this Privacy Policy
As we continue to develop our apps and services, websites, newsletters and the content and services we offer, it may become necessary to amend this Privacy Policy. Josef Manner & Comp AG reserves the right to change the Privacy Policy at any time with effect for the future. The current version is available at https://www.casali.world/en-us/privacy-policy. We recommend that you review the current Privacy Policy from time to time.
Vienna, 6 May 2026
